<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Entrust is proposing this change to deprecate and finally prohibit the `subject:organizationName` as a follow-up to our previous proposal that
failed to gain consensus on the way to improve the validation. </span><span style="color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;">Ben Wilson from Mozilla and Chema Lopez from Firmaprofesional have indicated to endorse
this proposal to deprecation and finally prohibit the OU.</span></div>
<div style=""><br>
</div>
<div style=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Before we submit the ballot, we would like to know if the members of the validation working group are fine with the definition 'documented
case-by-case exception' that is required in this proposal and expects the CA to create or collect documentation on why this exception was required.</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<blockquote style="margin-top:0;margin-bottom:0"><span style="font-family: "Courier New", monospace; font-size: 10pt;">i. __Certificate Field:__ `subject:organizationalUnitName` (OID: 2.5.4.11) </span>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt;"> __Required/Optional:__ __Optional__. </span></div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt;"> __Required/Optional:__
</span></div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt;"> __Prohibited__ if the `subject:organizationName` is absent.</span></div>
<div><span style="font-family: "Courier New", monospace; font-size: 10pt;"> __Prohibited__ after May 31, 2022 but allowed as a documented case-by-case exception until and including May 31, 2024.</span></div>
<span style="font-family: "Courier New", monospace; font-size: 10pt;"> __Deprecated__ discouraged until prohibited.</span><br>
</blockquote>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://github.com/cabforum/servercert/compare/main...vanbroup:oudeprecation">Comparing cabforum:main...vanbroup:oudeprecation · cabforum/servercert (github.com)</a><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
Paul</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</body>
</html>